b89e43150c534fe2178e72beebcbb4b1797611ed2e873b384be66d7de0516d2b | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-12-2023 18:28

Sharing

Report Analysis Logs

General

Target

0bd92f79ffb0d65150c7660bbc6ef1fc.pdf
Size

97KB
MD5

0bd92f79ffb0d65150c7660bbc6ef1fc
SHA1

d3fa2a48cd4d8cace04d5bae23978ad078dd0cf8
SHA256

b89e43150c534fe2178e72beebcbb4b1797611ed2e873b384be66d7de0516d2b
SHA512

e58a53687bc4e3c82fb83798f1d92f993c824d98e784b1705df10e7dee907e48bdeea18aaba6051d9cbed5d3bdb9e183582a68ad4022c66a42824ec1e8fd61e7
SSDEEP

3072:D2cflF1CbSXdll+UJL3I5VSSLWZ0exyGLATI0:qYZjdlAUJL3I3TMxpCt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1616	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1616	AcroRd32.exe
1616	AcroRd32.exe
1616	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bd92f79ffb0d65150c7660bbc6ef1fc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ac8941205f1f8949c8e8449af9007eeb

SHA1
9c8b82245b0f51dfac8b9450a4eb7af925bcc2ea

SHA256
37b5a8fa24003895188e37a0e6e34b0379a0b90f95730fce4370a4aee4d7b6d4

SHA512
3e984f59ca6f4a5c9c45dc460881a1109e9aabd390eb67c329db0a12fd760021587cb27cb41475780bf0fe58611dc418ac0d80e7caf6a31a060bcab10857555c

Download Submit